Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/1898d71469ec7eb44838f7555ca14c57d83773d4.roa
File:                     1898d71469ec7eb44838f7555ca14c57d83773d4.roa (raw, json)
Hash identifier:          i5js2RJF2p9AKEQOTd4w6KpzloYRj4/Fk41GRhIHsEk=
Subject key identifier:   22:8A:23:43:BB:15:9D:46:5C:E2:AA:85:BF:BF:47:DB:81:0B:45:F4
Certificate issuer:       /CN=8e03709f0f9fc13955d244b1e7bab74956cd979b
Certificate serial:       0C9EA6
Authority key identifier: 21:92:B9:92:72:52:16:A9:16:6C:9B:D8:A0:09:28:24:81:ED:F3:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e03709f0f9fc13955d244b1e7bab74956cd979b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/1898d71469ec7eb44838f7555ca14c57d83773d4.roa
Signing time:             Wed 24 Mar 2021 14:42:10 +0000
ROA not before:           Wed 24 Mar 2021 14:42:10 +0000
ROA not after:            Tue 24 Mar 2026 14:42:10 +0000
asID:                     265684
IP address blocks:        45.228.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827046 (0xc9ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e03709f0f9fc13955d244b1e7bab74956cd979b
        Validity
            Not Before: Mar 24 14:42:10 2021 GMT
            Not After : Mar 24 14:42:10 2026 GMT
        Subject: CN=1898d71469ec7eb44838f7555ca14c57d83773d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:19:e3:fb:d3:0e:83:9f:cb:61:9f:5c:64:e9:
                    8c:d8:17:21:5e:1d:63:08:62:89:0f:99:a6:54:8b:
                    3f:1f:ab:13:79:57:c7:55:69:4a:c4:fe:46:91:dd:
                    aa:02:8a:51:61:43:3d:b8:18:3e:5a:8d:7f:89:87:
                    5f:da:3a:48:60:f5:52:e7:d8:dd:17:65:96:5f:89:
                    da:cc:0a:b1:e5:e3:bb:48:94:59:72:3b:2e:4d:81:
                    13:c5:68:70:e4:1b:d4:63:d2:c2:e8:f4:4f:39:dd:
                    70:82:d7:b0:8a:e2:55:95:4f:42:ea:b9:72:da:ab:
                    af:f3:41:15:76:04:cf:06:3e:33:15:aa:7d:eb:e1:
                    3d:1b:37:98:a2:ae:eb:54:43:00:83:20:6f:79:83:
                    db:11:e5:ae:2c:3f:ef:68:8c:a0:b7:4a:1a:a0:e6:
                    7c:45:3c:00:1f:8c:43:8b:71:05:b6:d5:f9:5b:12:
                    7e:7d:0e:41:36:1b:6a:b9:76:0b:e6:1e:43:2b:0f:
                    31:6f:6d:49:81:95:56:bc:69:65:58:4a:a2:e4:42:
                    bd:67:b2:c6:62:88:c6:2f:9b:2d:a7:f5:e3:22:8b:
                    41:55:a1:c2:1c:06:65:57:bf:6d:bb:fe:fa:5d:49:
                    ad:c3:9b:33:f2:e9:f2:8a:b8:66:9d:44:a0:31:33:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8A:23:43:BB:15:9D:46:5C:E2:AA:85:BF:BF:47:DB:81:0B:45:F4
            X509v3 Authority Key Identifier:
                keyid:21:92:B9:92:72:52:16:A9:16:6C:9B:D8:A0:09:28:24:81:ED:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e03709f0f9fc13955d244b1e7bab74956cd979b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/1898d71469ec7eb44838f7555ca14c57d83773d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7316f33a-9c88-4a42-a0cc-d819fab9f887/8e03709f0f9fc13955d244b1e7bab74956cd979b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:a6:d3:bd:cf:2d:7c:ef:fe:7e:6e:1f:11:e2:0e:78:01:e6:
         e0:b6:b8:3c:f5:cc:79:1d:50:26:bb:69:b1:17:2b:31:ba:02:
         a0:2d:a9:30:92:2c:9b:e7:58:54:34:28:8b:a1:f4:51:72:90:
         11:7a:94:84:d1:34:e5:1e:e5:06:49:18:74:55:10:79:9c:17:
         dc:f7:e2:2c:ab:03:08:11:af:32:26:48:b9:4b:6e:fb:24:54:
         4b:5c:31:a3:83:ed:19:f6:f4:40:cb:26:aa:9a:32:d6:a5:8f:
         30:1e:f7:3c:ed:21:fc:25:96:71:67:ad:c0:3f:29:2a:a2:89:
         56:92:eb:36:13:f1:66:37:85:e1:02:0c:ba:9e:74:84:80:68:
         58:78:d1:94:37:43:84:44:29:7d:bd:15:5f:56:a2:f9:fc:13:
         5b:40:e1:60:46:ff:2b:35:44:9c:80:7e:7d:ae:e5:78:90:55:
         52:2a:9e:65:86:cb:fa:92:36:98:6b:8f:c0:f2:eb:c4:93:1d:
         aa:56:36:8c:1a:28:99:2e:7f:50:8c:bc:b5:da:92:ad:dd:10:
         2a:fb:d4:df:fa:8d:ce:55:71:0e:5f:1c:d3:c4:30:26:43:5b:
         7e:a5:84:be:f0:3a:59:c7:33:78:cf:c0:df:e1:84:ef:23:eb:
         da:3a:7f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 21 21:03:28 2024 by rpki-client on console-ams.rpki-client.org